[HIVE-15252] hive.security.command.whitelist doesn't work for 'reload function'

• Type: Bug
• Status: Resolved
• Priority: Minor
• Resolution: Fixed
• Fix Version/s: 2.3.0
• Component/s: Authorization
• Assignee: Chao Sun
• Reporter: Chao Sun
• Created: 21/Nov/16 22:45
• Updated: 21/Jul/17 18:26
• Resolved: 23/Nov/16 20:45

Description

Right now the 'reload function' is handled specially in HiveCommand#find:

        return null;
      } else if(command.length > 1 && "reload".equalsIgnoreCase(command[0])
          && "function".equalsIgnoreCase(command[1])) {
        //special handling for SQL "reload function"
        return null;
      }

However, this means the hive.security.command.whitelist doesn't work for the command. It's better to first do the privilege check and then the rest.

Issue Links

• is related to: HIVE-13043 Reload function has no impact to function registry